$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd329a01-d801-4d55-bb04-128c81630812.roa File: cd329a01-d801-4d55-bb04-128c81630812.roa (raw, json) Hash identifier: vix87/O1NL5Auefywm6wepPch5iUV1SgJrHrbY6dwbw= Subject key identifier: 1A:F6:23:3D:B0:3B:2E:4E:51:09:DD:A4:2E:64:6E:11:DC:27:24:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A3006BCE2482D20D94BBED65C2804B74E225962 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd329a01-d801-4d55-bb04-128c81630812.roa Signing time: Tue 08 Jul 2025 16:41:52 +0000 ROA not before: Tue 08 Jul 2025 16:41:52 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f68:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:30:06:bc:e2:48:2d:20:d9:4b:be:d6:5c:28:04:b7:4e:22:59:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:41:52 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=750dcfdb71a8aa25766442261b006308c46e2bb65d4f8b9f4cff09c4ac23aa9f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6b:18:de:25:cd:50:6e:b9:2e:54:5d:27:ff: c2:59:93:11:15:bd:b0:04:7a:83:9e:e8:34:0a:0d: bf:1e:b6:a4:9f:7a:6e:8e:97:d5:99:bb:fe:46:9b: ce:1b:48:e9:60:33:c6:e5:3d:6b:42:16:c4:9b:da: 43:90:20:70:98:f6:e8:27:ef:fd:77:1f:4a:ce:f4: 01:17:9a:32:11:56:b2:00:2e:d0:0c:d7:1d:07:05: 9b:8e:15:d4:d8:05:b8:db:64:53:de:b9:e9:d2:f2: ca:9b:df:46:e5:16:8d:f0:d0:6a:ef:1e:fb:6c:3d: 8b:f9:67:49:3d:f9:9d:02:10:f9:fb:5a:ea:a9:f9: ac:f1:6e:5e:88:29:31:96:12:cc:ad:39:04:86:ce: 86:b3:25:97:a4:db:ec:bf:c9:85:1c:09:e1:b5:cf: 16:3f:e7:54:5f:d4:82:3a:b9:f7:d6:3b:43:d9:5c: 2e:d4:e4:f0:f3:58:4c:15:ed:8b:d5:a5:38:e8:66: aa:e6:59:87:b9:3b:83:bb:c5:9c:59:13:29:fd:75: b6:8f:16:c4:fc:11:8e:3e:2f:26:58:9d:ad:8e:41: 1c:13:05:9f:b6:1f:2f:88:26:45:74:43:0f:dc:1f: a7:83:17:5e:d8:30:6e:3a:13:1c:29:2f:32:8e:04: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F6:23:3D:B0:3B:2E:4E:51:09:DD:A4:2E:64:6E:11:DC:27:24:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd329a01-d801-4d55-bb04-128c81630812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:8000::/39 Signature Algorithm: sha256WithRSAEncryption 2f:73:91:be:00:bc:e0:e2:81:61:59:76:9a:b3:72:04:45:a6: 91:d1:7e:f4:7f:1d:33:73:d4:d2:4d:cf:29:d0:9f:70:26:14: 15:3d:e0:95:e6:a9:1c:dc:8b:26:38:7e:d4:6b:38:e4:1c:06: 3c:97:e8:2e:df:49:05:57:a3:1b:ca:08:cf:8b:2f:1f:8d:98: fa:2c:fa:81:cc:07:5e:fa:5d:b3:52:a5:f3:a4:02:76:22:f8: cf:e0:44:14:6e:42:ec:46:eb:43:80:5b:aa:ce:ca:6c:ff:30: 7c:d2:9b:e2:f9:06:92:a2:d3:4d:4c:ee:64:3c:14:7f:a0:c1: a2:14:7d:5e:d4:c0:d9:19:43:b5:6f:67:66:c6:06:f2:1d:89: 67:e6:4e:6a:5a:c9:4c:be:a9:d7:89:57:8a:ad:97:38:30:f3: 36:25:b8:5d:08:f8:04:78:27:dd:89:5d:6e:1e:71:99:de:f9: 8a:e8:71:e9:c1:a7:6b:ac:cd:0a:49:ae:50:1c:58:f8:cc:10: 9f:b7:e6:73:53:30:2c:2d:ca:59:85:14:5d:33:ac:41:ed:e5: d0:6f:39:be:54:b6:04:cb:bd:ff:b1:c9:ee:b0:5f:a7:15:6d: be:ed:dc:2c:a8:a3:4b:34:69:c1:9e:8f:f2:ed:19:8d:f3:cd: 17:29:d5:31 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKjAGvOJILSDZS77WXCgEt04iWWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTY0MTUyWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTBkY2ZkYjcxYThhYTI1NzY2NDQyMjYxYjAwNjMwOGM0 NmUyYmI2NWQ0ZjhiOWY0Y2ZmMDljNGFjMjNhYTlmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOaxjeJc1QbrkuVF0n/8JZkxEVvbAEeoOe6DQKDb8etqSf em6Ol9WZu/5Gm84bSOlgM8blPWtCFsSb2kOQIHCY9ugn7/13H0rO9AEXmjIRVrIA LtAM1x0HBZuOFdTYBbjbZFPeuenS8sqb30blFo3w0GrvHvtsPYv5Z0k9+Z0CEPn7 Wuqp+azxbl6IKTGWEsytOQSGzoazJZek2+y/yYUcCeG1zxY/51Rf1II6uffWO0PZ XC7U5PDzWEwV7YvVpTjoZqrmWYe5O4O7xZxZEyn9dbaPFsT8EY4+LyZYna2OQRwT BZ+2Hy+IJkV0Qw/cH6eDF17YMG46ExwpLzKOBJ8lAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUGvYjPbA7Lk5RCd2kLmRuEdwnJMcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkMzI5YTAxLWQ4MDEtNGQ1NS1iYjA0LTEyOGM4MTYzMDgxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB9ogDANBgkqhkiG9w0BAQsFAAOCAQEAL3ORvgC84OKBYVl2mrNyBEWm kdF+9H8dM3PU0k3PKdCfcCYUFT3gleapHNyLJjh+1Gs45BwGPJfoLt9JBVejG8oI z4svH42Y+iz6gcwHXvpds1Kl86QCdiL4z+BEFG5C7EbrQ4Bbqs7KbP8wfNKb4vkG kqLTTUzuZDwUf6DBohR9XtTA2RlDtW9nZsYG8h2JZ+ZOalrJTL6p14lXiq2XODDz NiW4XQj4BHgn3Yldbh5xmd75iuhx6cGna6zNCkmuUBxY+MwQn7fmc1MwLC3KWYUU XTOsQe3l0G85vlS2BMu9/7HJ7rBfpxVtvu3cLKijSzRpwZ6P8u0ZjfPNFynVMQ== -----END CERTIFICATE-----Generated at Mon Jul 21 23:33:56 2025 by rpki-client